Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
Nuevo en 2MCI
Crear cuenta gratis Ver herramientas sin registro
Ya tengo cuenta
Iniciar sesión
Equipo
Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada hace 27 min
22,093
Total alertas
4671
Críticas
16834
Altas
8
Ransomware
1009
Esta semana
RSS
cwe-126 × Limpiar todo ×
M Alto vulnerabilidad
Hace 3 días
[CVE-2026-57546] Transient DOS when processing a continuous receive command with a zero-sized global configuration ov…
Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
28/09/2026
Vulnerabilidad de lectura fuera de límites en libXtst 1.2.5 y anteriores
Se identificó una vulnerabilidad de lectura fuera de límites (out-of-bounds read) en el analizador de respuestas RECORD de libXtst anterior a versión 1.2.6. Un servidor X malicioso podría explotar esta falla para provocar el bloqueo (denial of service) de clientes X conectados. Esta vulnerabilidad afecta principalmente a entornos de infraestructura de escritorio remoto y sistemas con autenticación X11, comunes en infraestructura empresarial de LATAM.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
23/09/2026
[CVE-2026-86243] Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious …
Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be affected. Users are recommended to upgrade to version 1.3.9 or 2.0.16, which fix the issue.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
17/09/2026
[CVE-2026-25284] Information Disclosure when a pointer is reused after being deallocated.
Information Disclosure when a pointer is reused after being deallocated.
nvdaltovulnerabilidad CVSS 7.3 NVD
M Alto vulnerabilidad
17/09/2026
[CVE-2026-25294] Transient DOS while parsing frame during channel usage.
Transient DOS while parsing frame during channel usage.
nvdaltovulnerabilidad CVSS 7.4 NVD
M Alto vulnerabilidad
17/09/2026
[CVE-2026-24075] Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handle…
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
17/09/2026
[CVE-2026-24081] Transient DOS when processing a channel map with insufficient used channels and adaptive frequency h…
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
nvdaltovulnerabilidad CVSS 7.4 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
17/09/2026
[CVE-2026-25275] Transient DOS when processing authentication frames with invalid FILS information element header len…
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-72932] Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclos…
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-69610] Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-69582] Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate…
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
08/09/2026
[CVE-2026-68875] Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
20/08/2026
[CVE-2026-53587] libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a…
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_pkt.c without first verifying that the smart-protocol pkt-line capability buffer contains 14 bytes. A malicious Git serve…
nvdaltovulnerabilidad CVSS 7.5 NVD
M Alto vulnerabilidad
11/08/2026
[CVE-2026-64905] Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
04/08/2026
[CVE-2026-25288] Transient DOS when processing a short target wake time channel usage response frame with insufficien…
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.
nvdaltovulnerabilidad CVSS 7.4 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
14/07/2026
[CVE-2026-57968] Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges …
Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/07/2026
[CVE-2026-55036] Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/07/2026
[CVE-2026-50435] Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local…
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/07/2026
[CVE-2026-50402] Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate …
Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.8 NVD
M Alto vulnerabilidad
14/07/2026
[CVE-2026-50372] Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate priv…
Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally.
nvdaltovulnerabilidad CVSS 7.0 NVD